CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
dca33a94c164b30e946cfc33c0faa7c7_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dca33a94c164b30e946cfc33c0faa7c7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dca33a94c164b30e946cfc33c0faa7c7_JaffaCakes118
Size
82KB
MD5
dca33a94c164b30e946cfc33c0faa7c7
SHA1
8bdc49dd59a7a9807447d5508172eb5a149459f9
SHA256
9961005c338f0ecaf1ca3b3b7d0a98fe72e68c24c47dd75fdb8926498e7adfea
SHA512
f3a7aede0d5697db1dcb0a404932c54a9b47190519a135f0422fc33d27cd33bf417d8acdf9b5d0ac412b6563dd342c35ec39d894d65c94d4f78f3a2cbff9e268
SSDEEP
1536:HJF4L9mV6pBYpyDTzWcojZYR4cC75wwNyenXljLJdghAw86kGUg3yywejvxhv:HJWL9mVeYpyXtcDuwtXlvOAwvkvywe/
Checks for missing Authenticode signature.
resource |
---|
dca33a94c164b30e946cfc33c0faa7c7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ